Educause Security Discussion mailing list archives
Re: Password Expatriation notification
From: Ken Connelly <Ken.Connelly () UNI EDU>
Date: Tue, 17 Aug 2010 14:00:00 -0500
We warn people (faculty, staff, and students) two weeks and one week in advance of their password expiration. I've not heard of anyone here interpreting that as a phishing attempt, but I suppose some may have thought that. - ken James Farr '05 wrote:
We recently implemented a policy where the users receives an email 30 days before the password is set to expire. Sure enough people thought this was a phishing attempt. However, since we have some off campus users that may never step foot on campus email seemed to be the only way to notify everyone. How do others notify their campus about passwords expiration? How often do you send those reminders? IITS will never ask you for your password. Never email your password to anyone. James Farr Information Security Officer Instructional Technologist Utica College jfarr () utica edu 315-223-2386
-- - Ken ================================================================= Ken Connelly Associate Director, Security and Systems ITS Network Services University of Northern Iowa email: Ken.Connelly () uni edu p: (319) 273-5850 f: (319) 273-7373
Current thread:
- University credentials used by third parties Justin Sherenco (Aug 17)
- Re: University credentials used by third parties Walter Petruska (Aug 17)
- Re: University credentials used by third parties Ken Connelly (Aug 17)
- Re: University credentials used by third parties Bob Bayn (Aug 17)
- Re: University credentials used by third parties Sam Hooker (Aug 17)
- Re: University credentials used by third parties Cathy Hubbs (Aug 17)
- Re: University credentials used by third parties Pete Hickey (Aug 17)
- Re: University credentials used by third parties Valdis Kletnieks (Aug 17)
- Re: University credentials used by third parties Walter Petruska (Aug 17)
- Password Expatriation notification James Farr '05 (Aug 17)
- Re: Password Expatriation notification Ken Connelly (Aug 17)
- Re: Password Expatriation notification Kieper, David (Aug 17)
- Re: Password Expatriation notification Bob Bayn (Aug 17)
- Re: Password Expatriation notification James (Aug 19)
- Re: Password Expatriation notification Ullman, Catherine (Aug 19)
- Re: Password Expatriation notification Mark Monroe (Aug 19)
- Re: (***POSSIBLE SPAM***) Re: [SECURITY] Password Expatriation notification SCHALIP, MICHAEL (Aug 19)
- Re: (***POSSIBLE SPAM***) Re: [SECURITY] Password Expatriation notification Walter Moore (Aug 19)
- Re: (***POSSIBLE SPAM***) Re: [SECURITY] Password Expatriation notification Valdis Kletnieks (Aug 19)
- Re: (***POSSIBLE SPAM***) Re: [SECURITY] Password Expatriation notification Charles Buchholtz (Aug 19)
- Re: (***POSSIBLE SPAM***) Re: [SECURITY] Password Expatriation notification Valdis Kletnieks (Aug 19)